# Create an Organization Unit

## Introduction to Exercise

As a Cloud Identity administrator, you may want to create an organizational structure within your domain. There are several reasons why you would do this:

- To control which applications and services are available to users
- To configure the available services differently for different sets of users
- To configure different Chrome OS device settings for different sets of devices

Learn more about how [user and device policies<svg aria-labelledby="cds-react-aria5472061106-:rpq:-title" class="css-8blerm" fill="none" focusable="false" height="16" id="bkmrk-" role="img" viewbox="0 0 20 20" width="16"><path d="M4.5 17c-.412 0-.766-.147-1.06-.44A1.445 1.445 0 013 15.5v-11c0-.412.147-.766.44-1.06.294-.293.648-.44 1.06-.44h4.75c.213 0 .39.071.534.214a.72.72 0 01.216.532c0 .21-.072.39-.216.535a.72.72 0 01-.534.219H4.5v11h11v-4.75c0-.213.072-.39.214-.534a.72.72 0 01.532-.216c.21 0 .39.072.535.216a.72.72 0 01.219.534v4.75c0 .412-.147.766-.44 1.06-.294.293-.647.44-1.06.44h-11zm11-11.438L8.583 12.48a.681.681 0 01-.52.219.758.758 0 01-.521-.24.729.729 0 010-1.062L14.438 4.5H12.75a.728.728 0 01-.534-.214.72.72 0 01-.216-.532c0-.21.072-.39.216-.535A.72.72 0 0112.75 3h3.5c.212 0 .39.072.534.216A.726.726 0 0117 3.75v3.5c0 .213-.072.39-.214.534a.72.72 0 01-.532.216.734.734 0 01-.535-.216.72.72 0 01-.219-.534V5.562z" fill="currentColor"></path></svg>](https://support.google.com/cloudidentity/answer/182433?hl=en&ref_topic=7558424) and [organizational structures<svg aria-labelledby="cds-react-aria5472061106-:rps:-title" class="css-8blerm" fill="none" focusable="false" height="16" id="bkmrk--1" role="img" viewbox="0 0 20 20" width="16"><path d="M4.5 17c-.412 0-.766-.147-1.06-.44A1.445 1.445 0 013 15.5v-11c0-.412.147-.766.44-1.06.294-.293.648-.44 1.06-.44h4.75c.213 0 .39.071.534.214a.72.72 0 01.216.532c0 .21-.072.39-.216.535a.72.72 0 01-.534.219H4.5v11h11v-4.75c0-.213.072-.39.214-.534a.72.72 0 01.532-.216c.21 0 .39.072.535.216a.72.72 0 01.219.534v4.75c0 .412-.147.766-.44 1.06-.294.293-.647.44-1.06.44h-11zm11-11.438L8.583 12.48a.681.681 0 01-.52.219.758.758 0 01-.521-.24.729.729 0 010-1.062L14.438 4.5H12.75a.728.728 0 01-.534-.214.72.72 0 01-.216-.532c0-.21.072-.39.216-.535A.72.72 0 0112.75 3h3.5c.212 0 .39.072.534.216A.726.726 0 0117 3.75v3.5c0 .213-.072.39-.214.534a.72.72 0 01-.532.216.734.734 0 01-.535-.216.72.72 0 01-.219-.534V5.562z" fill="currentColor"></path></svg>](https://support.google.com/cloudidentity/answer/4352075?hl=en&ref_topic=7558424) work.

### **Exercise Scenario**

You receive a new email from the IT Manager, Alexa Bell, requesting to restructure your domain.

*Hey Admin,*

*As you know we now have two people working in Support, their names are Will and Tom (see below for details). I want to set up a helpdesk to offer technical support to our employees and customers.*

*Is there any way you can set these guys up with some different settings than the rest of the employees? For example they will need access to some different services like chat, that I want blocked for everyone else.*

*Thanks, Alexa Bell*

<div class="css-1yr0py9" id="bkmrk-employee-position-wi"><table><thead><tr><th scope="col">Employee

</th><th scope="col">Position

</th></tr></thead><tbody><tr><td>Will Marconi

</td><td>Support

</td></tr><tr><td>Tom Edison

</td><td>Support

</td></tr></tbody></table>

</div>### **Exercise Directions**

1\. [Sign into your Google Admin console<svg aria-labelledby="cds-react-aria5472061106-:rpu:-title" class="css-8blerm" fill="none" focusable="false" height="16" id="bkmrk--2" role="img" viewbox="0 0 20 20" width="16"><path d="M4.5 17c-.412 0-.766-.147-1.06-.44A1.445 1.445 0 013 15.5v-11c0-.412.147-.766.44-1.06.294-.293.648-.44 1.06-.44h4.75c.213 0 .39.071.534.214a.72.72 0 01.216.532c0 .21-.072.39-.216.535a.72.72 0 01-.534.219H4.5v11h11v-4.75c0-.213.072-.39.214-.534a.72.72 0 01.532-.216c.21 0 .39.072.535.216a.72.72 0 01.219.534v4.75c0 .412-.147.766-.44 1.06-.294.293-.647.44-1.06.44h-11zm11-11.438L8.583 12.48a.681.681 0 01-.52.219.758.758 0 01-.521-.24.729.729 0 010-1.062L14.438 4.5H12.75a.728.728 0 01-.534-.214.72.72 0 01-.216-.532c0-.21.072-.39.216-.535A.72.72 0 0112.75 3h3.5c.212 0 .39.072.534.216A.726.726 0 0117 3.75v3.5c0 .213-.072.39-.214.534a.72.72 0 01-.532.216.734.734 0 01-.535-.216.72.72 0 01-.219-.534V5.562z" fill="currentColor"></path></svg>](https://support.google.com/cloudidentity/answer/182076?hl=en&ref_topic=7557903) as the administrator user using **your administrator account name and password.**

2\. Click the **Users icon**.

3\. In the toolbar, click the **Filters icon** to see your organizations (also called orgs or organizational units).

4\. Hover over the **top-level parent org**, most likely called yourdomain.com, to add a new sub organization, and **click the elipses that appears to the right**.

5\. Click **Add sub organization**.

6\. In the **Create new organization dialog box**, fill in the details of the new Support organization and **click Create Organization**.

7\. Return to the parent organization users page, and from the list, select your two Support users: Will Marconi and Tom Edison.

8\. In the toolbar on the top right, click the **Move to another organization** icon and choose your new Support org.

9\. When the confirmation prompts, click **OK**.

You should now see your two users moved to your designated Support org.

- Users can move from one org to another.
- A user can only be in one organizational unit at a time unlike, for example, groups where a single user can be in multiple groups at once.